$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a2c3e6bf-5481-3a46-bcda-6848b0b62155.roa File: a2c3e6bf-5481-3a46-bcda-6848b0b62155.roa (raw, json) Hash identifier: sETqu+/vDm6oFoeS5M2CRLRjMGbswBkNlvd/hk6FbzM= Subject key identifier: D0:96:CB:FD:90:34:B2:3B:B5:DB:E3:40:79:82:55:A6:3D:B8:FB:88 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584ECD372F5C945D5AF689F11AC0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a2c3e6bf-5481-3a46-bcda-6848b0b62155.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 14618 IP address blocks: 130.137.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:2f:5c:94:5d:5a:f6:89:f1:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=fba991ff-b111-467d-a87b-62f894e99de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bd:c7:62:89:96:a9:67:e0:65:c4:f7:f0:66: 9f:6e:b5:e3:d2:e6:9b:ed:f0:5f:a8:48:51:e3:b1: 84:81:11:62:1c:f0:fc:28:c1:08:77:61:aa:8c:12: d2:99:e2:bd:d0:67:b4:95:8a:6a:6a:8e:50:d8:de: ee:10:56:18:9a:eb:43:37:19:62:9a:87:48:28:7b: f6:ca:cc:de:df:b4:ee:a9:7c:d5:39:4b:a4:06:2b: b6:dc:4f:6a:21:20:d4:0c:e4:7f:ed:15:4b:df:2b: 23:ea:02:ea:3e:44:f7:ab:5e:12:58:54:62:bb:7a: 61:42:27:fc:41:74:2d:07:ab:1a:0b:eb:69:f8:cc: b2:1c:f5:c7:37:23:21:f3:5b:de:da:5e:b9:a4:6d: 2a:65:48:f8:05:f6:3a:44:43:23:1b:66:50:e1:c4: f7:96:63:db:0f:5a:a2:84:2b:0f:89:f6:82:fc:42: 0b:08:3d:06:34:cf:22:9c:4c:33:86:de:65:47:99: 6b:22:46:11:9b:57:f3:a3:cf:e3:b1:da:e8:7d:d6: a6:79:52:8f:22:ff:34:bc:74:d8:5a:6a:8f:4a:68: 47:e9:13:5a:0c:55:04:1f:e7:df:26:10:00:b0:b5: 88:3b:ec:6b:52:8b:63:d2:ae:7c:98:92:a9:8e:47: fc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:96:CB:FD:90:34:B2:3B:B5:DB:E3:40:79:82:55:A6:3D:B8:FB:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a2c3e6bf-5481-3a46-bcda-6848b0b62155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b3:dd:1e:db:fa:b9:83:84:23:7c:cd:41:8f:a0:ee:07:bc: 52:16:7f:1d:33:43:1a:81:f4:a4:9c:d5:d0:66:28:e4:0d:3a: 62:69:7d:47:3c:71:75:69:82:f2:32:e1:28:8d:97:a1:1d:a9: d4:b8:84:5c:c3:58:62:30:c3:31:7f:38:5c:4b:31:db:18:b7: 62:21:d6:14:e3:ce:4e:1d:2b:f4:82:f6:85:11:69:8f:5d:4d: 3f:d5:6c:c7:02:79:71:0f:5d:e1:23:d7:ea:dc:d6:e3:b0:27: 36:64:3d:02:1a:42:71:ff:0b:9e:66:e1:27:eb:3d:79:c8:60: ed:d2:a5:42:47:5d:ab:c7:24:94:88:f7:a1:32:7c:68:12:95: 2f:77:06:aa:67:e1:11:ec:27:e2:53:a8:f7:69:cd:30:ca:c9: e4:86:c9:3a:28:11:68:fd:cc:a1:17:1e:85:d7:bf:21:16:c9: 28:a6:94:d2:27:1a:7f:70:2e:ce:e6:a1:ed:e5:d5:8a:ae:c5: 13:4a:f6:e6:94:a3:c8:7b:b3:f0:c6:5c:a3:b0:08:93:3e:84: a8:69:7e:0f:0d:fc:73:97:32:f2:6c:23:0e:dc:43:b0:2c:14: de:c6:c5:63:6d:86:5d:6d:48:ae:38:12:79:53:0e:6d:54:73: 0a:81:2a:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNy9clF1a9onxGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk ZmJhOTkxZmYtYjExMS00NjdkLWE4N2ItNjJmODk0ZTk5ZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj73HYomWqWfgZcT38GafbrXj0uab7fBfqEhR 47GEgRFiHPD8KMEId2GqjBLSmeK90Ge0lYpqao5Q2N7uEFYYmutDNxlimodIKHv2 ysze37TuqXzVOUukBiu23E9qISDUDOR/7RVL3ysj6gLqPkT3q14SWFRiu3phQif8 QXQtB6saC+tp+MyyHPXHNyMh81ve2l65pG0qZUj4BfY6REMjG2ZQ4cT3lmPbD1qi hCsPifaC/EILCD0GNM8inEwzht5lR5lrIkYRm1fzo8/jsdrofdameVKPIv80vHTY WmqPSmhH6RNaDFUEH+ffJhAAsLWIO+xrUotj0q58mJKpjkf84QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCWy/2QNLI7tdvjQHmCVaY9uPuIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTJjM2U2YmYtNTQ4MS0z YTQ2LWJjZGEtNjg0OGIwYjYyMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgok5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWz3R7b+rmDhCN8zUGPoO4HvFIWfx0zQxqB9KSc1dBmKOQNOmJpfUc8 cXVpgvIy4SiNl6EdqdS4hFzDWGIwwzF/OFxLMdsYt2Ih1hTjzk4dK/SC9oURaY9d TT/VbMcCeXEPXeEj1+rc1uOwJzZkPQIaQnH/C55m4SfrPXnIYO3SpUJHXavHJJSI 96EyfGgSlS93Bqpn4RHsJ+JTqPdpzTDKyeSGyTooEWj9zKEXHoXXvyEWySimlNIn Gn9wLs7moe3l1YquxRNK9uaUo8h7s/DGXKOwCJM+hKhpfg8N/HOXMvJsIw7cQ7As FN7GxWNthl1tSK44EnlTDm1UcwqBKiw= -----END CERTIFICATE-----Generated at Tue Sep 22 09:57:02 2026 by rpki-client